{"Version":"2012-10-17","Statement":[{"Sid":"BmaSessionApi","Effect":"Allow","Action":["bedrock-mantle:CreateAgentSession","bedrock-mantle:GetAgentSession","bedrock-mantle:ListAgentSessions","bedrock-mantle:CreateAgentSessionEvent","bedrock-mantle:ListAgentSessionEvents","bedrock-mantle:ListAgentSessionItems","bedrock-mantle:DeleteAgentSession"],"Resource":"*"},{"Sid":"PassOnlyTheSessionRole","Effect":"Allow","Action":"iam:PassRole","Resource":"arn:aws:iam::123456789012:role/BedrockManagedAgentsPreviewInferenceServiceRole","Condition":{"StringEquals":{"iam:PassedToService":"bedrock-mantle.amazonaws.com"}}}]}